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Quantum state privacy amplification (QSPA) is the quantum analogue of classical privacy ampli- 
fication. If the state information of a series of single particle states has some leakage, QSPA reduces 
this leakage by condensing the state information of two particles into the state of one particle. 
Recursive applications of the operations will eliminate the quantum state information leakage to a 
required minimum level. In this paper, we report the experimental implementation of a quantum 
state privacy amplification protocol in a nuclear magnetic resonance system. The density matrices 
of the states are constructed in the experiment, and the experimental results agree with theory well. 
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I. INTRODUCTION 

The combination of quantum physics with communication gives rise to quantum communication. The physics prin- 
i K , ciples of quantum mechanics offer the advantage of provable security, and higher capacity of quantum communication 
£h ' over its classical counterparts. There are various quantum communication tasks, such as quantum key distribution 
where random keys are distributed among two users separated at a distance |lHj], quantum secret sharing [5l4lO| 
where a secret is shared among several users and the users can read out the shared secret only by cooperation, and 
quantum secure direct communication [Ill4l7| | where secret messages are transmitted directly over a quantum channel. 
They serve the various needs of communication. 

Under practical conditions, quantum communication is inevitably affected by noise in quantum channels. It is hard 
to distinguish whether the errors are due to an eavesdropping behavior or the noise in the channel itself. Therefore 
quantum communication over a noisy channel is not compl etely secure, and some post-processing must be done. For 
instance in quantum key distribution, privacy amplification 20] is performed to distill secure keys from the less secure 
raw keys. Quantum privacy amplification 21-23] is exploited for a sequence of entangled Einstein-Podolsky- Rosen 
(EPR) pairs so as to obtain maximally entangled pairs in protocols using EPR pairs. 

In some quantum communication protocols, in the end and intermediate results of the quantum communication, 
there are a sequence of single photons in nonorthogonal quantum states [lla [la Qjj , f° r instance in states |0), |1), 
|+x) = (|0) + |l))/\/2 and |— x) — (|0) — |l))/-\/2, where |0) and |1) represent the horizontal and vertical polarization 
state of the photon respectively. These single photons are sent from Bob to Alice. After eavesdropping check, Alice 
encodes the bit values on the single photons by performing some unitary operations, and then sends the encoded 
photons back to Bob. If the information of the quantum states of the photons are leaked due to either eavesdropping 
or channel noise, then one needs to reduce the information leakage by some operation. The usual privacy amplification 
used in QKD post-processing is not applicable, because the single photons are in states in two conjugate basis, and 
they cannot be added together in the manner used for the usual privacy amplification. Quantum privacy amplification 
designed for the EPR based protocols is not applicable to this case either, because the single photons are not entangled 
states. For this purpose, quantum state privacy amplification was proposed recently [24j and it reduces the information 
leakage in the quantum states of single photons. The essential idea of QSPA [24[ is to perform combined operations 
of controllcd-NOT gates and Hadamard gates on two qubits, and make a measurement on one qubit. Using the 
measurement result, one can specify the state of the remaining qubit. However the state of remaining particle is 
unknown to an adversary, hence reduces his/her knowledge of the quantum state. In this way, the information leakage 
is reduced. 

It is appealing to choose the nuclear magnetic resonance (NMR) system to implement the QSPA protocol. First, 
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the NMR technique is a well-developed and sophisticated technique. It has been a powerful tool for experimental 
study of quantum information processing which can demonstrate the quantum manipulation of various quantum 
information processing tasks. The essential features of quantum algorithms can be demonstrated in such a quantum 
system, and the technique developed in NMR system is also helpful in other candidate quantum systems. For example, 
many quantum algorithms have been successfully demonstrated in NMR quantum system |25|-[30| , and some quantum 
communication protocols, such as teleportation [3l| and dense coding [32,l33|, have been implemented in the NMR 
system. Secondly, quantum gates are relatively easier to implement in NMR system than in optical system. For 
transmission, it is no doubt that optical system is the best candidate information carrier. However in terms of gate 
operations, NMR system is easier because the quantum gates can be realized by radio-frequency pulses and free 
evolutions. Thus, demonstrating quantum algorithms in NMR enjoys the ease of gate operations while testing the 
essential quantum operations. On the other hand, there have been many efforts in building interfaces between flying 
qubits and stationary qubits [3J-|37| . The combination of flying qubits and stationary qubits may be a good candidate 
for quantum information processing, especially for those involving both the transmission and processing of qubits. 
If such interface could be successfully build, nuclear spin qubit may well be a good candidate of stationary qubit. 
In that case, the flying photon qubit may first be transferred to a stationary electron spin qubit, and then further 
transferred to nuclear spin qubit. 

This paper reports the experimental study of QSPA in a nuclear magnetic resonance quantum system. In this work, 
we have experimentally implemented the QSPA protocol in a nuclear magnetic resonance system, and all the quantum 
operations needed in the QSPA are demonstrated. Density matrices of states during the QSPA were constructed. 
The experimental results agree with theory well. 

II. THE PRINCIPLE OF QUANTUM STATE PRIVACY AMPLIFICATION 

Firstly, we briefly describe the QSPA protocol, for details see Ref. [24]. It is the quantum analogue of classical 
privacy amplification. In classical cryptography, if a sequence key of n bits has some leakage to the outside, the legit- 
imate users can use the privacy amplification to reduce this information leakage. The common privacy amplification 
protocol [20| uses the parities of m partitions of subsets of the original raw key with some permutations. Thus, instead 
of using the original n-bits key, the legitimate users use m bits of parities as the new key. Usually, m is less than 
n, the privacy of the key has been amplified, and hence has better security. The task of QSPA is as follows. Two 
single-qubit states, 

\ V >) 1 = oi|0) + 6i|l), (1) 

W) 2 = « 2 |0)+6 2 |1), (2) 

where the coefficients 01, b\, a 2 and b 2 satisfy the normalization requirement, 

M 2 + N 2 = |a 2 | 2 + N 2 = i, (3) 

are known to the legitimate users, and however have an information leakage to an adversary Eve. The task of QSPA 
is to reduce this state information leakage. Because the single-qubit states are usually not orthogonal, the approach 
to take the parity is not applicable. Instead, the quantum state privacy amplification protocol in Ref.[2J] uses two 
controlled-not (CNOT) gates and a Hadamard (H) gate, which may be simply called the CHC operation (for simplicity, 
we call this QSPA protocol as CHC-QSPA protocol hereafter). The schematic circuit is shown in FigfT] The initial 
state \ip) in of the QSPA is the product of two single photon states, 

\i>) m = W)i®W) 2 - ( 4 ) 

After the CHC operation, the state of the joint system is changed to 
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Wont = ^={(«i«2 + 6162) \0) 1 + (0162 - M 2 ) |1)J |0) 2 



+ -={{ ai a 2 - 6162) |l)i + (0162 + 6102) 10)!} |1) 2 . 



Then one measures the second qubit in the a z basis. If \f) 2 out = |0) is obtained, the state of control qubit is 

l^i.out = (oioa + 6162) |0> 1 + (0162 - 6102) |1>! ■ (6) 
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FIG. 1: Circuit of the CHC-QSPA protocol. |y>i) and \<p%) denotes the states of the two qubits, respectively. The target qubit 
is measured at the end so as to incorporate the state information of the second qubit into the first qubit. 



Otherwise, the first qubit state is 



\<P)i,out = (°i a 2 - b i b z) \ l )i + ( a i fe 2 + ha 2 ) |0) 1 



(7) 



In this way, no matter what the measurement result of second qubit is, the state information of two qubits is 
concentrated on the first one. So the privacy of the state is amplified. 
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TABLE I: The truth table of the output state for the control qubit \<p) 1 out , when the measurement result of the target qubit 
is |0). \<p)i and \p) 2 are the input states of the control and target qubit, respectively. 
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TABLE II: The truth table of the output state of the control qubit \ip) 1 out , when the measurement result of the target qubit 
is |1). |<p} 1 and \<p) 2 are the input states of the control and target qubit, respectively. 



We take the quantum one-time-pad protocol [l5j as an example, where the single photon states are | ± x) and | ± z) 
respectively. The truth table of the output state of first qubit \f) 1 out is shown in Tables HI and HT1 for the measurement 
results of the target qubit |0) and |1), respectively. When \ip) 1 — |0), \ip) 2 = |1), after the CHC operation, the output 
state is 



>out = ^(|l>l|0> 2 + |0) 1 |l) 2 ). 



(8) 



If the measurement result of the target qubit \<p) 2out = |0), the final state of the control qubit \ip) 1 out = |1). So 
the privacy of the input state |0) 1 |1) 2 is concentrated on the final state of the control qubit |1) 1 . If \tp) 2 out = |1) 
is obtained, the initial key |0) 1 |1) 2 is compressed to the condensed key |0) 1 . It is obvious that the condensed key 
depends not only on the input states of two single photons, but also on the result of the measurement on the target 
qubit. 

Suppose an adversary Eve knows the complete information of the control qubit but nothing about the target qubit. 
She can only guess the input state of the target qubit to deduce the condensed key. In most quantum communication 



protocols, the single photons prepared by the legitimate user are in one of the four states |0), \1), \+x), \—x) randomly. 
Even if Eve knows completely the information of both qubits, which is a small probability event |24| . she can not deduce 
the condensed state with certainty, because the final state of the control qubit |<p) 1 out has two possible results even 
though the input state \ip) in is fixed. The output state depends on the measurement result of the target qubit, 
according to the truth tables, when the input state \ip) 2 = |0). 

In practice, the process of QSPA can be used repeatedly to get more secure quantum state by using the retained 
qubit from the last round as a control and choosing a third qubit from the sequence as the target. The more one 
repeats the QSPA operations, the lower the state information leakage. 



III. NMR REALIZATION 



The QSPA protocol was experimentally realized in NMR in a sample of Carbon-13 labeled chloroform ( 13 CHCL3) 
which was dissolved in d6 acetone. The experiments were done at 22°C with a Bruker Avance III 400 MHz spec- 
trometer. We assign the 13 C as the control qubit, and the 1 H as the target qubit, here the two qubits are denoted 
as CI and H2. With the convention that magnetic field is along the z-axis, we define the spin up |f) as |0) state 
and spin down |J.) as |1) state, which correspond to the low-frequency part and high-frequency part of the spectrum 
respectively. The system Hamiltonian is 
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where v\ and v 2 are the resonance frequencies for CI and H2, respectively. The scalar coupling between two spins 
J12 has been measured to be 215Hz. 

The pseudopure state |0}_, |0) o is prepared from the thermal equilibrium state of the two qubits system using the 
spatial averaging method [2q.l29j. where the pulse sequence is [$]%. — >• [grad] z —> [— 7r/4] 2 — > [1/2 J] — > [t/4]^ — >• [grad] z , 
where [grad] z is the gradient field. The state evolution under these pulses is 
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where [8) a is defined as the rotation of spin k through angle about d-axis. [r] is the free evolution of the system for 
t time interval, and [grad] z denotes a gradient pulse along the z-axis. Accordingly, 



cos 9 = 27 C /7 ff , 

where 7c and jh are the gyromagnetic ratios of spin 13 C and proton -'^H, respectively. 
The pulse sequence of the QSPA operation in the CHC-QSPA protocol is found to be 
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The optimized CNOT gate pulse sequence is shown in Figl^l The free evolution [wj— ] is realized by using a free time 
delay r = I/4J12 separated by a pair of 7r pulses in the opposite directions, and these pulses can average out the 
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FIG. 2: Optimal NMR pulse sequence for the controlled-NOT gate. The wide and narrow boxes denote it and tt/2 pulses, 
respectively, the upper and lower lines are for the control and target qubits respectively. X and Y denote the axes along which 
the pulses are applied, and the overbars indicate the opposite direction. The time period r, during which no pulses are applied, 
is set equal to 1/4 J12. The order of pulses are from the left to the right. 




FIG. 3: The density matrix of initial state \ip) in = |0) 1 |1} 2 . 



effects of free Hamiltonian evolution of two spins <j\ and al . In this way, we can also reduce the error accumulations 
caused by imperfect calibration of the 7r pulses. The H gate is implemented by a tt/2 pulse along y-axis, followed by 
a it pulse along — x-axis. 



We have implemented the QSPA protocol for two kinds of initial states, \ip} i 

'V3 



-- 10)! |1> 2 , and |V) m - 

1 , |0) 1 + i |1) 1 j (cos 15° |0) 2 + sin 15° |1) 2 ). The state |0) 1 |1) 2 can be obtained by rotating the second spin it about 

y-axis from the pseudopure state \0} 1 |0) 2 - The experimental density matrix for initial state \0) 1 |1) 2 is shown in 
FigFJ] After the CHC-operation, the outcome state is \ip) out = -W|01) + 1 10) ) , and the experimental density matrix 

was reconstructed by state tomography technique [33, |39| and is shown in Fig. 2] The density matrices agree with 
theoretical predictions very well. 

For quantum communication, the case with state \ip) in — ( 2 I^K + 5 l-Oi ) (cos 15° |0) 2 + sin 15° |1) 2 ) 

is more interesting because it represents the more general nonorthogonal state case. The state 

(^f- \Q) 1 + ||l)i) (cosl5° |0) 2 +sinl5° |1) 2 ) can be prepared by applying [^-]\ -t [f]^ to the pseudopure state. 

The density matrices of the initial and output state are shown in FigJ5] and |5] respectively. For comparisons, we 
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FIG. 5: The density matrix of initial state |^i) in = (^ |0} 1 
theoretical prediction. 



l)j ) (cos 15° |0) 2 + sin 15° |1) 2 ) : ( a ) experiment result; (b) 



have also shown the theoretical density matrices for these states. The output state has a more complicated form for 
this initial state, and it is \ip) out = (0.6830 |00) + 0.5000 |01) - 0.1830 |10) + 0.5000 |11)). FigE^a) shows the density 
matrix of the outcome state. The agreement between theory and experiment is good. 



IV. SUMMARY 



In conclusion, we have constructed the pulse sequence for the QSPA operation in the CHC-QSPA protocol. The 
results of the experiments agree with the theoretical predictions well both in the case with computational basis states 
and the general case of nonorthogonal states. The output carries the state information of two qubits in the QSPA. 
With the information about the measurement result and the information of the two input qubits, a legitimate user 
knows the state of qubit after QSPA, whereas an illegal user lacks the proper information of all the qubits involved, and 
hence loses his/her knowledge about the quantum state after the QSPA. In this way, the quantum state information 
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FIG. 6: The density matrix of outcome state after the CHC-operation ( -^ |0) 1 + | |l)i) (cos 15° |0) 2 + sin 15° |1} 2 ): (a) ex- 
perimental result; and (b) theoretical result. 

leakage is reduced. The present experiment clearly demonstrated the protocol. 

This work is supported by the National Natural Science Foundation of China Grant No. 10874098, the National 
Basic Research Program of China (2006CB921106, 2009CB929402). 



References 



[1] C. H. Bennett, G. Brassard, Proceedings of the IEEE International Conference on Computers, Systems, and Signal 
Processing. Bangalore, India, IEEE, New York, 175 (1984). 

[2] A. K. Ekert, Phys. Rev. Lett. 67, 661 (1991). 

[3] N. Gisin, G. Ribordy, W. Tittel, and H. Zbinden, Rev. Mod. Phys. 74 145 (2002). 

[4] X. L. Zhang, Y. X. Zhang, and K. L. Gao, Commun. Theor. Phys. 43 627 (2005). 

[5] M. Hillery, V. Buzek, and A. Berthiaume, Phys. Rev. A 59 1829 (1999). 

[6] A. Karlsson, M. Koashi, and N. Imoto, Phys. Rev. A 59 162 (1999). 

[7] S. Bandyopadhyay, Phys. Rev. A 62 012308 (2000). 

[8] R. Cleve, D. Gottesman, and H. K. Lo, Phys. Rev. Lett. 83 648 (1999). 

[9] Y. M. Li, K. S. Zhang, and K. C. Peng, Phys. Lett. A 324 420 (2004). 

[10] F. G. Deng, X. H. Li, C. Y. Li, P. Zhou, and H. Y. Zhou, Phys. Rev. A 72 044301 (2005). 

[11] G.L. Long and X.S. Liu, Phys. Rev. A 65, 032302 (2002). 

[12] A. Beige et al., Acta Phys. Pol. A 101, 357 (2002). 

[13] K. Bostrom and T. Felbinger, Phys. Rev. Lett. 89 187902 (2002). 

[14] F. G. Deng, G. L. Long, and X.S. Liu, Phys. Rev. A 68 042317 (2003). 

[15] F.G. Deng and G.L. Long, Phys. Rev. A 69 052319 (2004). 

[16] F. L. Yan and X. Q. Zhang, Eur. Phys. J. B 41 75 (2004). 

[17] C. Wang, F. G. Deng, Y. S. Li, X. S. Liu, and G. L. Long, Phys. Rev. A 71 044305 (2005). 

[18] Z. J. Zhang, Y. Li and Z. X. Man Phys. Rev. A 71, 044301 (2005) 

[19] Ai-Dong Zhu, Yan Xia, Qiu-Bo Fan, and Shou Zhang, Phys. Rev. A 73, 022338 (2006) 

[20] C. H. Bennett, G. Brassard, and J. M. Robert, SIAM J. Comput. 17 210 (1988). 

[21] C. H. Bennett, G. Brassard, S. Popescu, B. Schumacher, J. A. Smolin, and W. K. Wootters, Phys. Rev. Lett. 76, 722 

(1996). 

[22] C. H. Bennett, D. P. DiVincenzo, J. A. Smolin, and W. K. Wootters, Phys. Rev. A 54, 3824 (1996). 

[23] D. Deutsch, A. Ekert, R. Jozsa, C. Macchiavello, S. Popescu, and A. Sanpera, Phys. Rev. Lett. 77 2818 (1996). 

[24] F. G. Deng and G. L. Long, Commun. Theor. Phys. 46 443 (2006). 



[25] N. Gershenfeld and I. L. Chuang, Science 275, 350 (1997). 

[26] D. G. Cory, A. F. Fahmy, and T. F. Havel, Proc. Natl. Acad. Sci. U.S.A. 94, 1634 (1997); D.G. Cory, M. D. Price, and T. 
F. Havel, Physica D 120, 82 (1998). 

[27] R. Marx et al., Phys. Rev. A 62, 012310 (2000). 

[28] L. Xiao and G.L. Long, Phys. Rev. A 66, 052320 (2002). 

[29] D. X. Wei, X. D. Yang, J. Luo, X. P. Sun, X. Z. Zeng and M. L. Liu, Chin. Sci. Bull. 49, 5423-426 (2004). 

[30] W. Z. Liu, J. F. Zhang, Y. Cao, W. Y. Huo, L. Hao, G. L. Long, and Z. W. Deng, Appl. Phys. Lett. 94, 064103 (2009). 

[31] M. A. Nielsen, E. Knill, and R. Laflamme, Nature (London) 396, 52 (1998). 

[32] X. Fang, X. Zhu, M. Feng, X. Mao and F. Du, Phys. Rev. A 61, 022307 (2000). 

[33] J.F. Zhang, J. Y. Xie, C. Wang, Z. W. Deng, Z. H. Lu and G. L. Long, Sciences in China, G48, 706-715 (2005). 

[34] V. Jacques, P. Neumann, J. Beck, M. Markham, D. Twitchen, J. Meijer, F. Kaiser, G. Balasubramanian, Phys. Rev. Lett. 
102, 057403 (2009). 

[35] F. Casagrande, A. Lulli, and M. G. A. Paris, Phys. Rev. A 79, 022307 (2009). 

[36] S. Tanzilli, W. Tittel, M. Haider, O. Alibart, P. Baldi, N. Gisin and H. Zbinden, Nature, 437, 116-120 (2005). 

[37] H. Kosaka, H. Shigyou, Y. Mitsumori, Y. Rikitake, H. Imamura, T. Kutsuwa and K. Edamatsu, AIP Conference Proceed- 
ings 1110, 245-248 (2009). 

[38] G. L. Long, H. Y. Yan, and Y. Sun, J. Opt. B: Quantum Semiclassical Opt. 3, 376 (2001). 

[39] G. M. Leskowitz and L. J. Mueller, Phys. Rev. A 69, 052302 (2004). 



